CVE-2021-24580CWE-89

CVE-2021-24580: vulnerability in Side Menu Lite - add sticky fixed buttons

Side Menu Lite < 2.2.6 - Authenticated SQL Injection

Published · Updated

Follow this CVE+ Monitor Side Menu Lite – add sticky fixed buttons

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.4%
The Side Menu Lite WordPress plugin before 2.2.6 does not sanitise user input from the List page in the admin dashboard before using it in SQL statement, leading to a SQL Injection issue
Affected products
Unknown · Side Menu Lite - add sticky fixed buttons